Please enable JavaScript.

Coggle requires JavaScript to display documents.

Incident Response (Security Incident Response (Preparing for an Incident…

- - - - Meeting compliance regulations (eg: PCI, FDIC)
      - Allowing the organization to respond to incidents in a systematic manner
      - Improving response time and effectiveness
  - - - What has happened?
      - What measures were taken?
      - What the results of the plan ?
- - - - Continue offering critical services in the event of disruption
      - Survive a disastrous interruption to activities
      - Rigorous planning and commitment of resources are necessary to adequately plan for such a disaster event
      - BCP is primarily the responsibilty of senior management
    - - Critical operations necessary to the survival of the operations
      - The human/material resources supporting these critical operations
      - Pre-disaster readiness covering incident response management to address all relevant incident affecting business processes
      - Evacuation procedures
      - Circumstances under which a disaster should be declared
      - Procedures for declaring a disaster
      - Identification of the persons responsible for each function in the plan
      - Identification of contract information
      - Step-by-step explanation of the recovery process
      - Identification of the various resources required for recovery and continued operation of the organization
  - - - Time frames
      - Priorities
      - Resources
      - Interdependencies that support key process
    - - What are the different business processes?
      - What are the critical information resources related to an organization's critical processes?
      - What is the critical recovery time period for information resources in which business processing must be resumed before significant or unacceptable losses are suffered?
    - - Recovery Point Objective (RPO)
        
        determined based on the acceptable data loss in case of a disruption
        
        indicates the earliest point in time that is acceptable to recover the data, and effectively quantifies the permissible amount of data loss in case of disruption
      - Recovery Time Objective
        
        Amount of time allowable for the recovery of a business function or resources after a disaster occurs.
  - - - Full
        
        Copy everything
      - Incremental
        
        Copy changes since last backup
      - Differential
        
        Copy changes since last Full backup
- - - - Non-volatile media
    - - Volatile memory
    - - Software and Hardware
    - - Network Traffic